#34 Add AppView production readiness: clap, DID auth, XDG, health, docs

closed high · sable · 2026-03-02 23:37 · closed 2026-03-02 23:37 · feature · Phase 4: AppView + Web UI

Subtasks

Comments — 2

sable note 2026-03-02 23:37

Auth is mandatory — no --no-auth bypass. Health endpoint stays public. DID-scoped auth or bearer token required for all other endpoints. Ed25519 signing (#102) is the foundation for DID auth (#105).

sable note 2026-03-02 23:37

All 7 subissues complete. Ed25519 signing, XDG support, clap subcommands, DID-scoped auth, health endpoint, AppState, status command, API docs. 299 tests pass, clippy clean.

Generated 2026-03-03 02:53 UTC